Lucene search

K
osvGoogleOSV:CVE-2017-2807
HistorySep 05, 2017 - 6:29 p.m.

CVE-2017-2807

2017-09-0518:29:00
Google
osv.dev
2

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Rows per page:
1-10 of 251

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%